Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
yara BackDooR__fr_ — —
yara FSO_s_ntdaddy — —
yara nstview_nstview — —
yara HYTop_DevPack_upload — —
yara PasswordReminder — —
yara Pack_InjectT — —
yara FSO_s_RemExp_2 — —
yara FSO_s_c99 — —
yara rknt_zip_Folder_RkNT — —
yara dbgntboot — —
yara PHP_shell — —
yara hxdef100 — —
yara rdrbs100 — —
yara Mithril_Mithril — —
yara hxdef100_2 — —
yara Release_dllTest — —
yara webadmin — —
yara commands — —
yara hkdoordll — —
yara r57shell_2 — —
yara Mithril_v1_45_dllTest — —
yara dbgiis6cli — —
yara remview_2003_04_22 — —
yara FSO_s_test — —
yara Debug_cress — —
yara webshell — —
yara FSO_s_EFSO_2 — —
yara thelast_index3 — —
yara adjustcr — —
yara FeliksPack3___PHP_Shells_xIShell — —
yara HYTop_AppPack_2005 — —
yara xssshell — —
yara FeliksPack3___PHP_Shells_usr — —
yara FSO_s_phpinj — —
yara PHP_sh — —
yara xssshell_default — —
yara EditServer_Webshell_2 — —
yara by064cli — —
yara Mithril_dllTest — —
yara peek_a_boo — —